Wireshark · Wireshark-dev: Re: [Wireshark-dev] [TCP segment of a reassembled PDU] and HTTP Continuation or non-HTTP traffic

[Stephen Fisher <steve@xxxxxxxxxxxxxxxxxx>]

On Aug 19, 2009, at 1:53 AM, Domingo J. Ponce wrote:

>  I am trying to figure out how I can get Tshark to stop showing
> packets that are TCP [TCP segment of a reassembled PDU] and HTTP
> Continuation or non-HTTP traffic.

If you know the type of traffic you're after, use it as a display  
filter.  For example, a display filter of HTTP will only show the  
final reassembled packet and not the unassembled TCP segments in  
between.  Would that work?


Steve